win2000域控制器错误码----无法创建账号!!!!!!!!!

azhao

1.账号加入域时,提示"目录服务无法分配相对标识号"<br>
2.同时,也无法在两台win2000域服务器上创建账号.<br>
3.服务器已干活一年有余.<br>
4.其中一个错误日志.<br>
Event Type: Error<br>
Event Source: NTDS KCC<br>
Event Category: (1)<br>
Event ID: 1311<br>
Date: 1/10/2005<br>
Time: 5:49:29 PM<br>
User: N/A<br>
Computer: WIN2000S<br>
Description:<br>
The Directory Service consistency checker has determined that either (a) there is not enough physical connectivity published via the Active Directory Sites and Services Manager to create a spanning tree connecting all the sites containing the Partition DC=olympic,DC=com, or (b) replication cannot be performed with one or more critical servers in order for changes to propagate across all sites (most often due to the servers being unreachable). <br>
<br>
For (a), please use the Active Directory Sites and Services Manager to do one of the following: <br>
1. Publish sufficient site connectivity information such that the system can infer a route by which this Partition can reach this site. This option is preferred. <br>
2. Add an ntdsConnection object to a Domain Controller that contains the Partition DC=olympic,DC=com in this site from a Domain Controller that contains the same Partition in another site. <br>
<br>
For (b), please see previous events logged by the NTDS KCC source that identify the servers that could not be contacted.

azhao

公司有两台域控制器,刚才我试了一下,在一台上做的更改在另一台上也会自动改变.

７９００５９

从上面dcdiag\\看来是你的站点复制有问题阿.你的域控制器可以在站点内复制吗?

azhao

用dcdiag.exe 测试如下.netdiag的没贴.<br>
C:\>dcdiag<br>
<br>
Domain Controller Diagnosis<br>
<br>
Performing initial setup:<br>Done gathering initial info.<br>
<br>
Doing initial required tests<br>
<br>Testing server: FUYONG\w2s<br>Starting test: Connectivity<br>......................... w2s passed test Connecti<br>
<br>
Doing primary tests<br>
<br>Testing server: FUYONG\w2s<br>Starting test: Replications<br>......................... w2s passed test Replicat<br>Starting test: NCSecDesc<br>......................... w2s passed test NCSecDes<br>Starting test: NetLogons<br>......................... w2s passed test NetLogon<br>Starting test: Advertising<br>Server w2s is advertising as a global catalog, but<br>it could not be verified that the server thought it was a GC<br>......................... w2s failed test Advertis<br>Starting test: KnowsOfRoleHolders<br>......................... w2s passed test KnowsOfR<br>Starting test: RidManager<br>No rids allocated -- please check eventlog.<br>......................... w2s passed test RidManag<br>Starting test: MachineAccount<br>......................... w2s passed test MachineA<br>Starting test: Services<br>SMTPSVC Service is stopped on [w2s]<br>......................... w2s failed test Services<br>Starting test: ObjectsReplicated<br>......................... w2s passed test ObjectsR<br>Starting test: frssysvol<br>......................... w2s passed test frssysvo<br>Starting test: kccevent<br>An Error Event occured. EventID: 0xC000051F<br>Time Generated: 01/12/2005 13:58:30<br>(Event String could not be retrieved)<br>An Error Event occured. EventID: 0xC000051F<br>Time Generated: 01/12/2005 13:58:30<br>(Event String could not be retrieved)<br>......................... w2s failed test kccevent<br>Starting test: systemlog<br>An Error Event occured. EventID: 0x0000410A<br>Time Generated: 01/12/2005 13:12:27<br>(Event String could not be retrieved)<br>An Error Event occured. EventID: 0x0000410A<br>Time Generated: 01/12/2005 13:43:27<br>(Event String could not be retrieved)<br>......................... w2s failed test systemlo<br>
<br>Running enterprise tests on : olym.com<br>Starting test: Intersite<br>......................... olym.com passed test Intersite<br>Starting test: FsmoCheck<br>Error: A GC returned by DsGetDcName() was not a GC in it's d<br>Warning: DcGetDcName(PDC_REQUIRED) call failed, error 1355<br>A Primary Domain Controller could not be located.<br>The server holding the PDC role is down.<br>......................... olym.com failed test FsmoCheck<br>
<br>
C:\><br>
<br>

７９００５９

用netdiag.exe测试rid有没失效.

azhao

我把原值由500变为1000还是不行????<br>
咋办???

７９００５９

我想你的问题最终可能是rid主机出了问题,导致不能添加对象.但是都是有可能rid池用完导致不可建帐户可以通过修改注册表的方法解决.kb:<a target=_blank href=http://support.microsoft.com/default.aspx?scid=kb>http://support.microsoft.com/default.aspx?scid=kb</a>;zh-cn;316201

azhao

版主老大.<br>
文章我已经看了.但是服务器关系到全公司100多台电脑登陆问题.<br>
为了安全,针对16645事件,你能帮我介绍一下增加 new account-identifier pool的方法吗?<br>
打扰之处,甚感不安!

azhao

非常感谢.<br>
我会认真研究一下.

７９００５９

<a target=_blank href=http://support.microsoft.com/default.aspx?scid=kb>http://support.microsoft.com/default.aspx?scid=kb</a>;zh-cn;316201